Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
File:                     VrS_zQFkrXxmiK8iJGyC4Zld01E.mft (raw, json)
Hash identifier:          9J+J8dBCh3qhWQkzu7ao8Uz2yWbdYwJA4Jvk68NUaMY=
Subject key identifier:   C7:25:B3:1D:3D:55:91:06:7A:AB:14:CC:79:67:E9:26:46:1D:A6:14
Authority key identifier: 56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51
Certificate issuer:       /CN=56b4bfcd0164ad7c6688af22246c82e1995dd351
Certificate serial:       01993839934E14A76376486FF4A1F99A5AA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
Manifest number:          167B
Signing time:             Thu 11 Sep 2025 10:02:01 +0000
Manifest this update:     Thu 11 Sep 2025 10:02:01 +0000
Manifest next update:     Fri 12 Sep 2025 10:02:01 +0000
Files and hashes:         1: L8YsrOLlwO66BsQEEtK6Lg8aUqo.roa (hash: ECXVVyoHo6mN0mEmdgrhg+O//yJsNOUcG+xLAybX5t4=)
                          2: VrS_zQFkrXxmiK8iJGyC4Zld01E.crl (hash: zVjl2lHB7BK/UKYht8wAdfPikxh1G54LiDGmqYApZ3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:38:39:93:4e:14:a7:63:76:48:6f:f4:a1:f9:9a:5a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b4bfcd0164ad7c6688af22246c82e1995dd351
        Validity
            Not Before: Sep 11 10:02:01 2025 GMT
            Not After : Sep 12 10:02:01 2025 GMT
        Subject: CN=c725b31d3d5591067aab14cc7967e926461da614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c5:25:4f:23:fa:5a:51:f1:3d:1b:33:71:32:
                    f6:30:1d:17:2f:e2:04:33:d3:8b:19:e5:51:b3:65:
                    77:69:6d:75:25:22:8d:c1:58:5a:b4:2e:70:d0:2a:
                    f8:d6:71:1b:97:cd:b7:f4:0b:ae:f8:cf:78:ea:26:
                    74:23:78:49:11:a5:ba:f6:f6:46:a0:df:ad:85:f0:
                    a5:4e:e7:a6:96:6a:99:3f:9b:9b:c4:69:e1:db:bc:
                    25:1f:68:65:0d:c0:03:85:aa:d6:6f:8b:fb:f4:c5:
                    ce:4e:cc:54:6a:ca:67:a5:6c:e9:ff:3b:84:6a:ee:
                    e1:70:30:79:93:90:1f:30:e6:7a:be:3f:18:fd:1b:
                    2e:08:8b:17:d5:f9:9f:37:57:96:57:b2:31:4f:33:
                    f6:97:db:16:62:f4:3c:3a:88:a0:98:80:92:8e:b4:
                    3c:c0:c0:93:dc:85:d8:8a:aa:73:56:29:9c:a8:fe:
                    e1:5f:7d:3f:a2:40:b7:21:64:1f:02:6b:3d:b9:ad:
                    bb:29:0f:6c:f8:02:97:93:74:55:26:9c:b6:ef:77:
                    ee:6e:ef:77:b8:9a:45:e9:97:4b:d8:ac:94:12:e7:
                    6c:fb:be:96:75:b4:6a:4a:e0:f3:7b:1d:3f:42:83:
                    3c:e4:97:ba:16:8c:b6:34:de:ad:02:cf:76:af:8e:
                    3e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:25:B3:1D:3D:55:91:06:7A:AB:14:CC:79:67:E9:26:46:1D:A6:14
            X509v3 Authority Key Identifier:
                keyid:56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:5b:13:c2:46:7a:36:eb:7e:d1:cf:4d:09:40:55:66:53:c8:
         f5:2a:f6:4f:b9:e4:c7:0d:e0:4e:e7:ee:62:9b:36:65:2e:41:
         6e:01:bf:2b:3f:94:02:17:4e:37:6d:bb:b8:ea:8e:c2:8a:10:
         24:a9:7e:23:33:59:9e:75:09:2b:75:2f:c9:f3:b2:09:a0:2b:
         f7:97:15:6f:32:b5:27:c9:95:fb:44:47:07:c4:c2:69:30:e1:
         09:c4:51:64:f7:af:95:f2:c5:93:1f:36:38:1b:fd:86:54:bb:
         66:61:f6:34:a7:2c:46:a4:c6:78:f8:63:3f:a4:7e:35:55:8b:
         7e:8e:b4:e8:1a:aa:f3:df:c9:6d:3d:aa:01:a2:2b:e4:ef:f6:
         a5:fc:1b:e4:ea:fc:9b:4c:88:b8:10:c8:2e:d5:6e:0d:97:ab:
         8b:7a:c6:5f:80:fc:20:e2:f0:2c:05:46:3a:b8:66:3d:b7:a8:
         47:6e:1b:44:c9:48:22:ba:7f:c2:ac:47:51:e3:69:2b:c3:6b:
         ef:84:95:bc:94:6d:0c:07:ab:9e:83:2d:1b:3a:1c:06:5a:15:
         6e:99:03:d3:d6:43:28:22:cc:99:3e:c0:fe:9a:95:26:72:38:
         51:79:91:b7:69:42:4e:ce:72:21:67:82:92:67:0f:80:51:ea:
         b9:1d:39:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 12:08:05 2025 by rpki-client